This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/6o3kXODZyIarvSJHL6Yk6ubh1KA.roa
File:                     6o3kXODZyIarvSJHL6Yk6ubh1KA.roa (raw, json)
Hash identifier:          iOE2C96413H/kv4FNkziHp1ObrxvD2jS0O3Hcet170s=
Subject key identifier:   EA:8D:E4:5C:E0:D9:C8:86:AB:BD:22:47:2F:A6:24:EA:E6:E1:D4:A0
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       133C
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/6o3kXODZyIarvSJHL6Yk6ubh1KA.roa
Signing time:             Fri 06 Feb 2026 01:04:19 +0000
ROA not before:           Fri 06 Feb 2026 01:04:19 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     17716
IP address blocks:        203.64.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4924 (0x133c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  6 01:04:19 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=EA8DE45CE0D9C886ABBD22472FA624EAE6E1D4A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:49:f7:a3:8f:b1:7f:df:91:ee:cf:55:ab:0f:
                    e6:8e:e0:9a:57:52:55:ad:e7:9d:44:48:1c:59:e8:
                    9c:8d:34:33:fa:aa:2a:3d:1c:3d:c8:73:51:97:4a:
                    42:cd:06:f2:97:f1:2f:c7:93:ed:8a:90:36:d4:37:
                    dc:d5:47:7c:59:fb:70:e4:a6:05:40:f0:82:60:6b:
                    c5:b3:4a:e2:89:67:bf:87:77:d6:00:72:15:57:c3:
                    6c:04:66:f2:d0:58:61:90:8e:cb:7c:de:23:fe:6f:
                    16:b3:6d:fb:10:c2:ad:6c:73:25:d6:3b:0b:e8:29:
                    59:6d:a8:cf:8b:66:41:91:9f:c2:35:d7:3e:09:b6:
                    56:0a:d6:98:f7:89:9f:94:11:3a:aa:2f:d2:7e:a8:
                    a4:82:9c:28:28:87:4b:d7:8c:22:54:4d:4c:48:2e:
                    98:35:16:0b:5c:3f:60:c8:6e:3c:12:5b:26:ae:c8:
                    53:f0:68:d8:7f:8f:db:d4:bd:5d:d3:db:df:54:17:
                    5e:42:8c:f7:0a:e6:bf:60:5d:0e:4f:de:07:d0:e0:
                    a8:d9:9a:e1:10:46:09:33:29:d7:65:2d:ae:fb:16:
                    96:07:84:7a:da:57:bf:99:db:0f:c4:fe:a5:98:86:
                    ca:6f:d0:76:7a:28:73:1f:c3:c9:1e:dc:49:a9:1a:
                    2b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:8D:E4:5C:E0:D9:C8:86:AB:BD:22:47:2F:A6:24:EA:E6:E1:D4:A0
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/6o3kXODZyIarvSJHL6Yk6ubh1KA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.64.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:75:50:46:a1:46:0b:9d:b0:2e:71:a2:8e:75:0c:7c:8e:48:
         ed:4b:f3:14:6a:ff:35:4f:db:f9:30:54:15:80:d5:bf:75:8e:
         73:fd:08:8f:18:a9:80:b0:14:35:ce:e3:05:13:81:be:af:4c:
         16:6a:84:60:77:36:18:b9:1f:bc:0c:b0:47:59:d8:ac:db:dc:
         b5:7c:76:b0:ee:a7:60:e8:dc:f8:6b:3b:1a:d4:47:db:08:5b:
         78:33:82:13:61:85:bd:a3:1c:a6:e8:5f:72:82:bb:d3:c8:d8:
         6a:4d:ea:42:99:71:e6:8d:6b:d1:27:3c:61:49:6f:95:e2:9d:
         b0:be:3e:15:73:00:bd:3e:6f:71:4f:58:e9:4e:1f:34:84:a8:
         9b:76:80:f8:76:70:ec:2d:b9:49:3b:5c:af:e6:42:f4:94:3c:
         62:d6:55:19:e9:d2:6e:38:a3:cb:cb:26:28:29:2f:29:00:43:
         13:68:38:b6:37:e4:27:51:02:6f:f3:29:e1:5d:a1:a1:64:09:
         4e:f3:84:3d:25:cf:df:f0:fa:f7:4f:ed:8f:5b:84:9e:f6:1f:
         15:6a:0e:1d:02:64:5d:cc:66:d5:a9:5a:14:25:ed:87:10:2a:
         9c:ae:5b:6f:eb:d0:f5:b4:2e:2c:c8:d7:ac:ab:bb:48:f8:ae:
         73:7a:78:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:44:54 2026 by rpki-client